what is claimed is: 



1. A control unit (ll) for controlling safety-critical 
applications (5) , haying a microcomputer (MC) , a monitoring 
unit (check unit, CUl , and peripheral circuits (input output, 
10) , wherein the monitoring unit (CU) has first means for 
measuring the quiescent current of the microcomputer (MC) ; at 
least one quiescent cKirrent handshake line (IDDQ-HDSHK) for 
controlling the measurement of the quiescent current runs 
between the first meaAs of the CU and the MC; the CU has 
second means for applying a test data input signal for 
processing the test data output signal and for comparing the 
corresponding test data output signal of the MC to the 
corresponding test data output signal of the CU; and at least 
one test data signal transmission line runs between the second 
means of the CU and the\ MC . 
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2. The control unit (1) \as recited in Claim 1, wherein the 
first means includes an lEDDQ measuring circuit (8) , a voltage 
supply (9), an IDDQ measmring run control (MAS) (7), and a 
control system (6) of the CU; and the connection between the 
first means and the MC includes two handshake lines (START, 
END) , which run from the IDDQ-MAS to the MC, and at least one 
voltage supply line (VDD),\ which runs from the voltage supply 

(9) to the MC, at least onA of the voltage supply lines (VDD) 
running through IDDQ measurtLng circuit (8) . 

3. The control unit (1) as lAecited in Claim 2, wherein two 
voltage supply lines (VDD_analog, VDD_digital) run between the 
voltage source (9) and the MQ, one voltage supply line 
(VDD_digital) running throughithe IDDQ measuring circuit (8) . 



4. The control unit (1) as recited in Claim 1, wherein the 



first means includes an IDDQ measuring circuit (8) , a voltage 
supply (9) , an IDDQ measjiring run control (MAS) (7) , and a 
control system (6) of the CU; and the connection between the 
first means and the MC includes four handshake lines (START, 
END, CLK, PWR_DN) , which | run from the IDDQ-MAS (7) to the MC, 
and at least one voltage Isupply line (VDD) , which runs from 
the voltage supply (9) td the MC, at least one of the voltage 
supply lines (VDD) runninb through IDDQ measuring circuit (8) , 

5. The control unit (1) as recited in one of Claims 2 through 
4, wherein the first means have an initialization circuit 
(15) , which, after the control unit (1) is switched on, 
receives an initialization! signal (RST) from the voltage 
source (9) and subsequently transmits an enable signal 
(IDDQ EN) to the IDDQ-MAS {7) toy enable the IDDQ measurement. 
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6. The control unit (1) as recited in one of Claims 1 through 
5, wherein the second means ^include a test data signal 
generator (10) for applying a test data input signal to the 
MC, a response generator (11)\ for processing the test data 
input signal and for forming a corresponding test data output 
signal, a test data register (Vl7) for transmitting and 
receiving the test data, and a \ comparator (12) for comparing 
the test data output signal of \.h& MC to the test data output 
signal of the CU; and the connection between the second means 
and the MC includes at least oneVtest data transmission line, 
which runs between the test data ^^gister (17) and the MC . 

7. The control unit (1) as recitec^^in Claim 6, wherein the 
connection between the second mean^ and the MC includes two 
test data transmission lines (CU_Do^t, CUDin) . 

8. The control unit (1) as recited in Claim 6 or 7, wherein 



the second means have a tirigger generator (13) , which 
determines the instant at\ which the test data output signal of 
the MC is available at th^ comparator (12) , given an 
error-free MC. 

9. The control unit (1) asl recited in one of Claims 6 through 
8, wherein the second meanib have an error counter (14), which 
counts an error, in the evlnt that the test data output signal 
of the MC is not consistenl with the test data output signal 
of the CU, and/or in the e^lent that the test data output 
signal of the MC is availabLLe at the comparator (12) at a 
different instant that the jDne determined by the trigger 
generator (13) . I 
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10. The control unit (1) as Irecited in Claim 9, wherein the 
error counter (14) has a plutrality of response thresholds, 
exceeding the response threshold resulting in a different 
reaction in each case . \ I 

r 

11. The control unit (1) as recited in one of Claims 6 through 
10, wherein the first means h^ve an initialization circuit . 
(15) , which receives an initiaVLization signal (RST) from the 
voltage source (9) after the control unit (1) is switched on, 
subsequently synchronizes the uU with the MC, and then 
activates the test data signal generator (10) and the error 
counter (14) . 

12. A method for testing a microciomputer (MC) of a control 
unit (1) for controlling safety-critical applications, the 
control unit having the microcompiAter (MC) , a monitoring unit 
(check unit, CU) , and peripheral circuits (input output, lO) , 
wherein the quiescent current of tne MC is measured, a test 
data input signal is applied to theXMC, a first test data 



output signal is determin 
signal of the MC is compapre 
signal of the CU. 



13 . The method as recited 
current measurement is in 

14 . The method as recited 



d, and a second test data output 
d to the first test data output 



in Claim 12, wherein the quiescent 
the form of an IDDQ measurement . 



in Claim 13, wherein the IDDQ 
measurement is carried outl after the control unit (1) is 
switched on after being enabled by an enable signal (IDDQ_EN) 



15. The method as recited ion Claim 13 or 14, wherein the 
second test data output sigpal of the MC is compared to the 
first test data output signkl of the CU while the control unit 
(1) is in operation. 



16 . The method as recited ir 



one of Claims 13 through 15, 
wherein clock generator (clobk, CLK) is stopped by the MC 
during the IDDQ measurement and/or while the second test data 
output signal of the MC is b^ing compared to the first test 
data output signal of the CU, 



17. The method as recited in one of Claims 13 through 16, 
wherein the test data input signal of the CU is generated by a 
test data signal generator (10)\, via a feedback shift 
register . 



18. The method as recited in Claim 17, wherein the test data 
output signal of the CU is generavted by a response generator 
(11), with the aid of the Reed-Muller code. 
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